exploitDog

GHSA-949j-r9x2-w58x

Опубликовано: 19 янв. 2024

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.

An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.

Ссылки

EPSS

Процентиль: 47%

0.00237

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-434

Связанные уязвимости

CVE-2023-27168

CVSS3: 9.8

nvd

около 2 лет назад

An arbitrary file upload vulnerability in Xpand IT Write-back Manager v2.3.1 allows attackers to execute arbitrary code via a crafted jsp file.

EPSS

Процентиль: 47%

0.00237

Низкий

9.8 Critical

CVSS3

CVE ID

Дефекты

CWE-434